Fastconnect 6900 Firmware
by Qualcomm
CVEs (594)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-49845 | Hig | 0.51 | 7.8 | 0.00 | May 6, 2025 | Memory corruption during the FRS UDS generation process. | ||
| CVE-2024-49844 | Hig | 0.51 | 7.8 | 0.00 | May 6, 2025 | Memory corruption while triggering commands in the PlayReady Trusted application. | ||
| CVE-2024-49842 | Hig | 0.51 | 7.8 | 0.00 | May 6, 2025 | Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions. | ||
| CVE-2024-49841 | Hig | 0.51 | 7.8 | 0.00 | May 6, 2025 | Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling. | ||
| CVE-2024-49835 | Hig | 0.51 | 7.8 | 0.00 | May 6, 2025 | Memory corruption while reading secure file. | ||
| CVE-2024-45579 | Hig | 0.51 | 7.8 | 0.00 | May 6, 2025 | Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check. | ||
| CVE-2024-45578 | Hig | 0.51 | 7.8 | 0.00 | May 6, 2025 | Memory corruption while acquire and update IOCTLs during IFE output resource ID validation. | ||
| CVE-2024-45577 | Hig | 0.51 | 7.8 | 0.00 | May 6, 2025 | Memory corruption while invoking IOCTL calls from userspace to camera kernel driver to dump request information. | ||
| CVE-2024-45576 | Hig | 0.51 | 7.8 | 0.00 | May 6, 2025 | Memory corruption while prociesing command buffer buffer in OPE module. | ||
| CVE-2024-45575 | Hig | 0.51 | 7.8 | 0.00 | May 6, 2025 | Memory corruption Camera kernel when large number of devices are attached through userspace. | ||
| CVE-2024-45567 | Hig | 0.51 | 7.8 | 0.00 | May 6, 2025 | Memory corruption while encoding JPEG format. | ||
| CVE-2024-45566 | Hig | 0.51 | 7.8 | 0.00 | May 6, 2025 | Memory corruption during concurrent buffer access due to modification of the reference count. | ||
| CVE-2024-45564 | Hig | 0.51 | 7.8 | 0.00 | May 6, 2025 | Memory corruption during concurrent access to server info object due to incorrect reference count update. | ||
| CVE-2024-45554 | Hig | 0.51 | 7.8 | 0.00 | May 6, 2025 | Memory corruption during concurrent SSR execution due to race condition on the global maps list. | ||
| CVE-2025-21447 | Hig | 0.51 | 7.8 | 0.00 | Apr 7, 2025 | Memory corruption may occur while processing device IO control call for session control. | ||
| CVE-2025-21441 | Hig | 0.51 | 7.8 | 0.00 | Apr 7, 2025 | Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver. | ||
| CVE-2025-21440 | Hig | 0.51 | 7.8 | 0.00 | Apr 7, 2025 | Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver. | ||
| CVE-2025-21439 | Hig | 0.51 | 7.8 | 0.00 | Apr 7, 2025 | Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer. | ||
| CVE-2025-21438 | Hig | 0.51 | 7.8 | 0.00 | Apr 7, 2025 | Memory corruption while IOCTL call is invoked from user-space to read board data. | ||
| CVE-2025-21423 | Hig | 0.51 | 7.8 | 0.00 | Apr 7, 2025 | Memory corruption occurs when handling client calls to EnableTestMode through an Escape call. |
- risk 0.51cvss 7.8epss 0.00
Memory corruption during the FRS UDS generation process.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while triggering commands in the PlayReady Trusted application.
- risk 0.51cvss 7.8epss 0.00
Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions.
- risk 0.51cvss 7.8epss 0.00
Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while reading secure file.
- risk 0.51cvss 7.8epss 0.00
Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while acquire and update IOCTLs during IFE output resource ID validation.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while invoking IOCTL calls from userspace to camera kernel driver to dump request information.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while prociesing command buffer buffer in OPE module.
- risk 0.51cvss 7.8epss 0.00
Memory corruption Camera kernel when large number of devices are attached through userspace.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while encoding JPEG format.
- risk 0.51cvss 7.8epss 0.00
Memory corruption during concurrent buffer access due to modification of the reference count.
- risk 0.51cvss 7.8epss 0.00
Memory corruption during concurrent access to server info object due to incorrect reference count update.
- risk 0.51cvss 7.8epss 0.00
Memory corruption during concurrent SSR execution due to race condition on the global maps list.
- risk 0.51cvss 7.8epss 0.00
Memory corruption may occur while processing device IO control call for session control.
- risk 0.51cvss 7.8epss 0.00
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
- risk 0.51cvss 7.8epss 0.00
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
- risk 0.51cvss 7.8epss 0.00
Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while IOCTL call is invoked from user-space to read board data.
- risk 0.51cvss 7.8epss 0.00
Memory corruption occurs when handling client calls to EnableTestMode through an Escape call.
Page 12 of 30